HPE FlexNetwork 10500 Series Security Configuration Manual page 5

Configuring an 802.1X critical VLAN ·············································································································· 115
Configuration restrictions and guidelines ······························································································· 115
Configuration prerequisites ···················································································································· 115
Configuration procedure ························································································································· 115
Enabling the 802.1X critical voice VLAN ········································································································ 116
Configuration restrictions and guidelines ······························································································· 116
Configuration prerequisites ···················································································································· 116
Configuration procedure ························································································································· 116
Configuring an 802.1X guest VSI ··················································································································· 116
Configuration restrictions and guidelines ······························································································· 116
Configuration prerequisites ···················································································································· 116
Configuration procedure ························································································································· 117
Enabling 802.1X guest VSI assignment delay ······························································································· 117
Overview ················································································································································ 117
Configuration procedure ························································································································· 117
Configuring an 802.1X Auth-Fail VSI ············································································································· 118
Configuration restrictions and guidelines ······························································································· 118
Configuration prerequisites ···················································································································· 118
Configuration procedure ························································································································· 118
Configuring an 802.1X critical VSI ················································································································· 118
Configuration restrictions and guidelines ······························································································· 118
Configuration prerequisites ···················································································································· 118
Configuration procedure ························································································································· 119
Specifying supported domain name delimiters ······························································································ 119
Enabling 802.1X user IP freezing··················································································································· 119
Sending 802.1X protocol packets out of a port without VLAN tags ······························································· 120
Setting the maximum number of 802.1X authentication attempts for MAC authenticated users ··················· 120
Configuring 802.1X MAC address binding ····································································································· 121
Overview ················································································································································ 121
Configuration restrictions and guidelines ······························································································· 121
Configuration procedure ························································································································· 121
Configuring the EAD assistant feature ··········································································································· 122
Enabling logging for 802.1X users ················································································································· 123
Overview ················································································································································ 123
Configuration restrictions and guidelines ······························································································· 123
Configuration procedure ························································································································· 123
Displaying and maintaining 802.1X ················································································································ 123
802.1X authentication configuration examples ······························································································ 124
Basic 802.1X authentication configuration example ·············································································· 124
802.1X guest VLAN and authorization VLAN configuration example ···················································· 126
802.1X with ACL assignment configuration example ············································································· 128
802.1X guest VSI and authorization VSI configuration example···························································· 130
802.1X with EAD assistant configuration example (with DHCP relay agent) ········································· 132
802.1X with EAD assistant configuration example (with DHCP server) ················································· 134
Troubleshooting 802.1X ································································································································· 137
EAD assistant URL redirection failure ···································································································· 137
Configuring MAC authentication ································································ 138
Overview ························································································································································ 138
User account policies ····························································································································· 138
Authentication methods ·························································································································· 138
VLAN assignment ·········································································································································· 139
Authorization VLAN ································································································································ 139
Guest VLAN ··········································································································································· 140
Critical VLAN ·········································································································································· 140
VSI manipulation ············································································································································ 141
MAC authentication support for VXLANs ······························································································· 141
Authorization VSI ··································································································································· 141
Guest VSI ··············································································································································· 142
Critical VSI ············································································································································· 142
ACL assignment ············································································································································· 143
Redirect URL assignment ······························································································································ 143
iii